Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
File:                     fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json)
Hash identifier:          XBbeZJVWO5JeN2D8wM/JvIc3AuIneaJ6R96jcCOWQ7Q=
Subject key identifier:   36:F4:74:7D:E3:C7:5E:C5:8A:75:A0:7E:5E:4A:99:85:F3:47:0B:5A
Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F
Certificate issuer:       /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
Manifest number:          06A4
Signing time:             Sat 04 Apr 2026 22:12:09 +0000
Manifest this update:     Sat 04 Apr 2026 22:12:08 +0000
Manifest next update:     Sat 11 Apr 2026 22:12:08 +0000
Files and hashes:         1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: dTAHhozEbiHgbiFwprpBf4sy+WkNC8U6dVjiEy+LIZw=)
                          2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: lW6QZXgkIKKSa0jLf9ZE4i3WNOuxkEM9pch0Rc7OqqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl
                          rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F
        Validity
            Not Before: Apr  4 22:12:08 2026 GMT
            Not After : Apr 11 22:12:08 2026 GMT
        Subject: CN=69d18cb9-50ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:bc:b2:0f:52:ef:39:08:47:ab:c3:82:43:
                    2b:b0:47:2e:7d:f2:2d:bd:fb:fb:fc:e3:35:75:b5:
                    b7:5d:b1:1f:73:43:6f:ec:7e:dd:f7:73:5c:6d:e3:
                    ca:57:65:c5:ae:87:a8:f7:4e:84:5e:c5:dc:ad:47:
                    ea:e5:64:78:f6:30:b3:20:fa:69:0d:ee:d5:06:88:
                    77:e0:b8:7f:9b:5a:ac:03:85:00:c8:45:a2:96:e7:
                    d9:2d:58:ac:00:8a:dc:69:e0:f6:bf:da:65:9b:42:
                    11:de:35:98:48:1b:5f:96:fa:4b:a8:83:dd:e8:bc:
                    bf:44:b0:b8:a5:d3:fa:db:1f:4b:9b:cb:15:ef:7e:
                    2c:5b:29:2e:5e:83:94:5e:b9:e6:2c:95:66:6e:7a:
                    70:ee:32:b7:c7:70:b4:e4:26:0c:f8:1c:09:17:d1:
                    a6:b4:59:c4:f5:cf:48:2c:83:85:1d:74:c3:61:af:
                    31:1a:54:fc:bd:62:96:d2:fc:9c:08:e6:03:15:c3:
                    a2:ec:4a:d8:e1:6f:ef:83:52:9f:cd:2f:96:56:b4:
                    34:ba:20:0a:5e:97:6c:39:f1:22:55:61:f2:38:a3:
                    a2:ce:3b:a8:2b:9e:e1:fa:a0:fb:f9:f9:98:8e:9b:
                    51:ef:ab:6f:86:af:ac:bb:65:61:98:6f:68:55:d7:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:74:7D:E3:C7:5E:C5:8A:75:A0:7E:5E:4A:99:85:F3:47:0B:5A
            X509v3 Authority Key Identifier:
                keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:68:bd:96:4c:27:98:fa:18:32:4a:f1:dd:0d:79:b8:d6:
         6a:53:96:41:94:1c:c1:e8:18:ef:bc:69:b0:bb:8b:05:b0:b1:
         0b:10:d2:2f:04:4b:34:69:fa:31:a7:ce:d7:b2:f1:50:f2:38:
         a4:0f:bf:e4:20:21:16:d8:90:88:2b:bb:6f:19:b9:ec:ee:5b:
         7c:15:12:b4:35:2a:84:1e:c8:f1:e8:18:14:01:5f:f3:29:26:
         be:f9:e7:a8:8c:b3:97:dd:0d:df:b7:0e:68:3f:1b:92:e8:10:
         4d:ca:60:f8:71:6f:01:f6:82:dd:88:ee:e0:b6:4e:09:8d:2a:
         88:96:05:00:86:e7:8f:92:a6:04:2e:28:de:af:75:87:15:a5:
         91:75:c9:f3:77:e0:15:82:bb:ef:f9:d8:24:9a:13:dd:ca:23:
         06:a7:96:ec:03:03:4b:33:90:40:cb:60:ff:6c:a0:04:28:c1:
         04:d4:42:29:4d:67:7e:19:86:5f:de:90:43:da:47:27:af:8e:
         42:85:6e:b0:60:d0:63:8c:b7:5c:72:0c:df:8f:cd:8b:d2:45:
         9e:54:5b:e6:19:85:99:c0:6a:6a:b2:6a:28:9f:74:1c:e5:a8:
         b7:25:ac:33:11:78:f6:70:78:cf:29:64:47:e0:66:3e:ef:e4:
         f1:93:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:10 2026 by rpki-client